Path Traversal Vulnerability in TeamCity Allows Limited Admin Actions
CVE-2024-27199
7.3HIGH
Summary
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
Affected Version(s)
TeamCity < 2023.11.4
News Articles
SC Media CVE-2024-27198CVE-2024-27199
JetBrains patches new TeamCity authentication bypass bugs
TeamCity servers risk being exposed to “complete compromise” if patch isn’t installed, researchers warned.
3 months ago
thecyberthrone.in CVE-2024-27198CVE-2024-27199
PravinKarthik
Read all of the posts by PravinKarthik on TheCyberThrone
6 months ago
Trend Micro CVE-2024-27198CVE-2024-27199
TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types
CVE-2024-27198 and CVE-2024-27199 are vulnerabilities within the TeamCity On-Premises platform that can allow attackers to gain administrative control over affected systems.
7 months ago
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
First article discovered by Help Net Security
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database12 News Article(s)